Question
Capgemini
FR
Last activity: 18 Jan 2017 10:17 EST
Access from Tomcat instances to encrypted data on PostgreSQLI
Hi,
Did someone define access from Pega to an encrypted PostgreSQL database server ?
Thanks
-
Like (0)
-
Share this page Facebook Twitter LinkedIn Email Copying... Copied!
Accepted Solution
Capgemini
FR
It looks like Pega can encrypt data directly on database by following this article:
https://community.pega.com/support/support-articles/how-do-you-build-site-specific-cipher-encrypting
Is it right? Thanks
Pegasystems Inc.
IN
Hi PandourangamA,
Is the whole database encrypted or only some specific records? Not sure about the Postgre, but tomcat webcontainer can be configured to access a SSL encrypted Oracle database by making some changes in the context.xml.
Pegasystems Inc.
IN
yes, did at App Server, File System , columns & N/W.
There are many Encryption Options in PostgreSQL like 1) password 2) Specific Column 3) Data Partion 4) Passwords across n/w, etc..
password is encrypted by default, also Pega uses its BLOB encryption for pzpvStream columns.
Based on requirement, you have to choose Encryption Options at FilSystem, N/W, App Server, Columns, Client Side. We don't anticipate any issues with Encryption.
Capgemini
FR
Hi all,
Thanks for your answer. We will have to encrypt all data informations (users details, etc). We have a split configuration: a rules schema and a data schema. So I think we only need to encrypt data schema.
To not impact Pega development, with your experience, what is the best way to do that? We've seen pgcrypto but application needs to call specific functions for encrypting data, no?
Thanks for your help
Capgemini
FR
We're using CELS 7.2.1 and I've found this article who talks about HIPAA regulation:
https://www.pega.com/insights/resources/pega-customer-engagement-life-sciences
all while supporting regulations including HIPAA and FDA's 21CFR part 11
What does it means? Does Pega can encrypt data directly on database (so we don't need to encrypt on postgreSQL side)?
Thanks for your help
Accepted Solution
Capgemini
FR
It looks like Pega can encrypt data directly on database by following this article:
https://community.pega.com/support/support-articles/how-do-you-build-site-specific-cipher-encrypting
Is it right? Thanks
Pegasystems Inc.
IN
yes, this can be used to have AES or any other encryption to encrypt blobs.
Capgemini
FR
Ok N@reshReddy. I will see how to do that.
Thanks!